Network Security

So I am trying to upgrade a PIX 515E to 7.0 from 6.3. I blew away the config and plugged in a little 4 port switch into eth1 on the PIX and on the other side there is a laptop.The laptop is 192.168.1.5 and I configured the PIX through the interactiv...

Hello, i have a problem setting up portforwarding on a asa 5505I want to get tcp port 2051 on the outside to be forwarded to 192.168.6.10 on the inside and i have the following config:ASA Version 7.2(4) interface Vlan1 nameif inside security-level 10...

Hey All,Please see the attached config file for more info.I want to be able to NAT the computer at 111.111.111.2 (fe0 on 851) to a 10.80.125.216/29 address and allow it to go across the vpn tunnel to the computer at 10.20.127.21.The crypto map on the...

When I look at the specifications of an ASA5505 at the following link, it lists a bunch of features that I wasn't aware of:http://www.buy.com/prod/cisco-asa-5505-10-user-bundle-8-x-10-100base-tx-lan-1-x-management-3-x/q/loc/101/204229215.htmlHere's t...

Hi all,2 ASA5520 (active/standby). I have 10 VLANs, all with same security level (100) they are all internal networks, I them to talk each other without NAT but I'm getting a strange behaviour, I have a NAT dynamic so they can get to the Internet and...

Hi everybody!I have an ASA5510 with an "inside" and "outside" topology.All users at 192.168.1.0/24 network are using the ASA to reach Internet.Now I have a new router in the inside.The problem is users cannot reach 192.168.2.0/24 network at the new r...

I'm trying to install a 3rd party network monitoring tool, but it requires SNMP credentials. I would like to monitor the firewall. How do I set this up using cisco ASDM 5.2? Are there any security risks in setting up SNMP on the ASA?

Hi,After one year and 3 months without any problems I had to upgrade the ASA 5520 from version 8.03 to 8.04 due to a known bug (tcpmss problem).Everything worked fine with one exception: the Oracle application is not working any more.Whenever I remov...

Dears,i have a NAC manager, and two NAC server appliances and many NME-NAC-K9 network modules on ISR routers.Is it mandatory that all devices are upgraded to the same release, or different releases are compatible with each other.Thanks in advance

Has anyone used the EIGRP neighbor command on the ASA to enable unicast hellos and dynamic routing between two ASAs over a site to site VPN tunnel? I'd like to see if it is possible to eliminate an external router needed to build a GRE tunnel and in...

I have set up a site to site vpn between my corporate 5510 and a new 5510 for a remote office. I set a test public IP on the remote 5510 and used that IP for the peer address on the tunnel. When I receive the permanent IP from the ISP for the remot...

Hi I want LAN to LAN tunnel between ASA and 1800 with FQDN i.e peer=ccde.vpn.com for 1800 and support.vpn.com for ASA rather than using peer ip addresses in 'set peer .. ".Is this possible to use FQDN for tunnel peers ratehr than ip addresses ?Thanks